com.apple.configurationprofiles.userprofile.trustcert - Overview of the macOS Authorization Right
macOS 10.13 / 10.14
{
'class' : 'rule',
'comment' : 'Install user configuration profile with certificate requiring trust change.',
'rule' : [
'authenticate-session-owner-or-admin'
]
}